Repository navigation
[tiny-modules] tinytools: move tool-policy engine, registry vocabulary and deferred exposure into tinytools #7627
Description
Parent: #7541
Context
Several tool-surface pieces have zero host references and duplicate tinytools concepts.
What moves
| Path | LOC |
|---|---|
tools/agent_policy/* (tool-policy profiling and engine, 0 host refs) |
485 |
tools/registry/types.rs |
129 |
tools/registry/denials.rs |
78 |
tools/impl/meta/deferred.rs (host half of tinytools::ToolExposure::Deferred) |
113 |
What stays in OpenHuman
tools/rules/* (OpenHuman composition of tinytools::ToolRules), toolpacks, host tools, ops*.rs.
Upstream target
tinyhumansai/tinytools, cratetinytools(ortinyagents-harnesspolicy_gatefor the engine, if it fits better there). Related: tinytools#60. Coordinate with Tracker: consolidate security, policy, approvals and sandboxing into the tinysecurity bus module (+ tinybox audit) #7328 (tinysecurity), which consolidates tool-policy layers.
Host adapter after the move
Toolpacks register through the upstream registry types; the policy engine is configured from host rules.
Acceptance criteria
- Upstream PR merged in the owning repo first, then the gitlink bumped here to that merged commit. This is a Cargo library (kernel), so there is no cdylib release; CI builds the merged upstream commit.
- Tests move with the code; host keeps only composition/adapter tests.
- Old core code and its
*_tests.rsdeleted in the same PR — no re-export shims, nopub usealiases. - Matching entries removed from
scripts/ci/agent-runtime-boundary-baseline.json(where applicable) and the ratchet still passes. -
pnpm rust:layout,cargo check --manifest-path Cargo.toml,cargo check --manifest-path crates/openhuman-app/Cargo.tomlgreen. - Every behaviour change ships with a regression test (failing before, passing after);
pnpm debug rust <filter>for the affected suites. - Tool denial messages and deferred-tool exposure are unchanged for the default agent (snapshot of the exposed tool list).
Activity
tinysweeper commentedon Oct 13, 2026
Code-migration task: move tool-policy engine, registry vocabulary, and deferred tool exposure from OpenHuman's core into the upstream tinytools crate, with tests relocated, old code and baseline entries deleted, and a gitlink bump to the merged upstream commit. No user-visible breakage, so it is a planned refactor rather than a bug; candidate issues are sibling migrations of different modules, not duplicates.
Labelled
priority: p3.senamakel commentedon Oct 13, 2026
Module side merged: tinyhumansai/tinytools#66 (merge 18720afd96f558c188ba0864aabb3d71001b9e77). tinytools has no release workflow (library gitlink); pin to 18720afd96f558c188ba0864aabb3d71001b9e77. OpenHuman-side deletion/repointing still pending.
senamakel commentedon Oct 13, 2026
Module + host cutover merged: OpenHuman PR #7726 (merged 2ef3d3f), module PR tinyhumansai/tinytools#66, tinyagents pin PR tinyhumansai/tinyagents#426 (no release; library gitlink). Remaining before close: coordinate policy-engine placement with #7328 (tinysecurity); re-add host trace logging around build_session; optional default-agent tool-list snapshot test.
senamakel commentedon Oct 14, 2026
Partially landed in #7773: [tool-policy] trace logging restored via tools/policy_session.rs. Left open: placement coordination with #7328, optional default-agent tool-list snapshot test.
senamakel commentedon Oct 14, 2026
Closing: tinytools migration done (module tinytools#66, host #7726/#7773, tinyagents pin chain). Tool-policy placement agreed in a comment on #7328; remaining policy-layer cleanup is tracked there. Optional default-agent tool-list snapshot test not added.